Most models can be affected. Check if your first firewall rule sends to the built in proxy. See https://www.google.ca/amp/blog.netlab.360.com/7500-mikrotik-rout

Most models can be affected. Check if your first firewall rule sends to the built in proxy. See https://www.google.ca/amp/blog.netlab.360.com/7500-mikrotik-routers-are-forwarding-owners-traffic-to-the-attackers-how-is-yours-en/amp/ https://www.google.ca/amp/blog.netlab.360.com/7500-mikrotik-... in particular check if the webproxy and/or socks service are enabled.